13dc50cd897117b80f5bbc4793b695a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13dc50cd897117b80f5bbc4793b695a6
Size

1.9MB
MD5

13dc50cd897117b80f5bbc4793b695a6
SHA1

e92320b2373510a83687b1c655dd55dd580c599c
SHA256

06c6d7632b0951ead37d62f8d16432d0a723cb15f67258806c9b7a2b382ad1c9
SHA512

4b339d28ec9adbb4737af70ae7b4f1fe324b61e880688e23f088cbdc43cda764593b2019ccee350ea7098e7d9517585d9f47fa7c068317118c84d855526b425e
SSDEEP

24576:uc1i2UWHyCTmc+T6JaCOgIgoRBXX0UQ+Sbg8G8puSqRh5ly+xyGNmW/:uai2k6/j4BUU0gUkDgGV/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13dc50cd897117b80f5bbc4793b695a6

Files

13dc50cd897117b80f5bbc4793b695a6
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 24KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 786KB - Virtual size: 786KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ